Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/df1a2e-2901-4f27-a2f1-2c18010fbfbf/1/J0fBcXhuiDFn2GK-EB81ITW5I7Q.mft
File: J0fBcXhuiDFn2GK-EB81ITW5I7Q.mft (raw, json)
Hash identifier: 9UE5OzahPCLiFohe9brCRBSG7/EvCPKCOrP9sWtMrvU=
Subject key identifier: 3E:05:0B:77:73:22:04:A4:F3:23:AB:2C:9A:EC:C9:02:C7:9E:A0:66
Authority key identifier: 27:47:C1:71:78:6E:88:31:67:D8:62:BE:10:1F:35:21:35:B9:23:B4
Certificate issuer: /CN=2747c171786e883167d862be101f352135b923b4
Certificate serial: 019FF9B661C8CC6C70A91E7437BDFF5DD4FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0fBcXhuiDFn2GK-EB81ITW5I7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/df1a2e-2901-4f27-a2f1-2c18010fbfbf/1/J0fBcXhuiDFn2GK-EB81ITW5I7Q.mft
Manifest number: 0150
Signing time: Thu 13 Aug 2026 06:01:46 +0000
Manifest this update: Thu 13 Aug 2026 06:01:46 +0000
Manifest next update: Fri 14 Aug 2026 06:01:46 +0000
Files and hashes: 1: J0fBcXhuiDFn2GK-EB81ITW5I7Q.crl (hash: n1NpAzsbIicmhidhNWfsyM8YjDlTNwcg+LUBp6Z2dbg=)
2: O_GvhJ3AIu5IJuqpQ4uX03ArEEA.roa (hash: GC8qNwD4vLhbf1Ux7vQLpVBwBRtyOha518PQltW/PIg=)
3: hFukJ1Me328-WPvDybOfx7SqLNM.asa (hash: HFJhYuc006ijF+saTkFV1K0a6wbtr7JpRGOKmayJt1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/df1a2e-2901-4f27-a2f1-2c18010fbfbf/1/J0fBcXhuiDFn2GK-EB81ITW5I7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/df1a2e-2901-4f27-a2f1-2c18010fbfbf/1/J0fBcXhuiDFn2GK-EB81ITW5I7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/J0fBcXhuiDFn2GK-EB81ITW5I7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f9:b6:61:c8:cc:6c:70:a9:1e:74:37:bd:ff:5d:d4:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2747c171786e883167d862be101f352135b923b4
Validity
Not Before: Aug 13 06:01:46 2026 GMT
Not After : Aug 14 06:01:46 2026 GMT
Subject: CN=3e050b77732204a4f323ab2c9aecc902c79ea066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3c:02:ad:91:a4:df:ac:96:e1:1c:ce:d1:b7:
e9:cd:e3:02:99:e5:09:5c:da:4b:dd:83:80:91:57:
e4:d0:5b:86:b5:80:43:02:d5:70:d7:a3:c1:d6:9b:
7f:9e:08:5e:9f:e6:eb:89:fa:ff:eb:ed:0a:de:9f:
82:10:c0:49:89:0b:c7:9f:e7:76:a7:62:9c:7f:5e:
b2:64:94:16:d1:2d:b2:d8:b8:e0:ea:98:49:3f:cc:
37:f1:eb:24:1d:b5:0a:62:b2:37:9c:80:cc:d3:1b:
86:41:cd:dd:1d:f0:1d:6e:fc:51:39:0d:2c:71:ca:
2f:89:d2:20:a3:ab:49:54:5d:56:52:4d:29:1a:8f:
a2:8c:64:ea:f9:95:a7:2f:95:68:27:4c:02:dd:b6:
da:55:18:1f:ae:ee:1f:b8:6f:17:1f:5b:d6:ff:21:
97:d9:86:28:fd:ec:82:91:e8:0c:08:c5:1b:37:ca:
23:75:ce:70:e8:4b:19:de:c7:93:05:93:7b:23:3a:
42:c9:1e:6f:a9:ec:92:c8:fc:52:86:cf:2e:f0:ec:
35:e0:52:30:11:ae:22:97:b4:54:5b:c3:3c:a6:7f:
9e:3e:55:c9:14:7f:1f:15:e2:f4:a1:70:f6:83:51:
30:64:06:ac:01:56:72:4a:ee:be:77:bc:c7:90:19:
0f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:05:0B:77:73:22:04:A4:F3:23:AB:2C:9A:EC:C9:02:C7:9E:A0:66
X509v3 Authority Key Identifier:
keyid:27:47:C1:71:78:6E:88:31:67:D8:62:BE:10:1F:35:21:35:B9:23:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0fBcXhuiDFn2GK-EB81ITW5I7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/df1a2e-2901-4f27-a2f1-2c18010fbfbf/1/J0fBcXhuiDFn2GK-EB81ITW5I7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/df1a2e-2901-4f27-a2f1-2c18010fbfbf/1/J0fBcXhuiDFn2GK-EB81ITW5I7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:90:44:fb:4f:df:ae:93:d5:1f:28:d1:46:98:b9:0c:c6:b9:
20:c7:53:03:b3:97:2a:c8:a7:ef:c8:94:20:6d:9b:e7:5c:7f:
12:ab:ee:23:30:96:8c:be:fb:8a:a8:c2:b7:3c:92:f5:3c:3f:
0a:6a:68:e5:2a:61:fc:41:c2:ff:d0:a4:f1:bc:2c:b9:43:fe:
c9:ae:b4:af:9c:3e:e4:70:74:43:5b:3d:d2:b5:12:bf:3d:9e:
27:59:09:b9:ef:53:fd:3c:e7:e5:80:53:25:6e:5a:a3:c3:7f:
b7:64:4d:e6:cb:b5:29:07:6b:51:26:dc:a7:94:0e:b8:4b:33:
46:18:16:54:4c:c4:1d:d6:1e:7f:1d:13:52:1e:bd:bc:fe:af:
cb:37:a6:2f:66:35:4a:ba:1a:d2:76:3c:ef:3b:12:c8:a5:b2:
94:45:91:15:18:ab:f1:35:f9:df:9c:e1:41:60:89:5b:62:da:
5b:6e:22:39:3a:bf:2f:fd:90:e1:54:49:71:2a:9f:ac:1a:bb:
78:0d:ce:59:64:bf:86:9e:a6:d7:72:84:fd:f6:e5:25:17:c1:
78:6f:60:90:d0:a6:25:2b:3b:15:99:03:9d:6f:c3:35:1a:ab:
40:34:4e:18:6b:82:22:c0:b3:d6:52:b8:e8:5e:4c:45:7f:c9:
ca:47:c4:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 09:00:27 2026 by rpki-client